Take the 2-minute tour ×
Salesforce Stack Exchange is a question and answer site for Salesforce administrators, implementation experts, developers and anybody in-between. It's 100% free, no registration required.

I have two users - one is an Administrator and the other a Sales rep. I want the Sales rep to only have full access to his accounts, leads, contacts. I want the Administrator to have full access to everything on the system. I have used OWD and set the access to Private for Accounts, Leads, Contacts. However, the rep can still access accounts that don't belong to him. How do I stop that happening?

share|improve this question
    
Are you using role hierarchy? –  Pramod Kumar Jun 16 at 10:49
add comment

2 Answers 2

To answer this question you will need to answer yourself three questions

1)Have you set up a Role Hirerachy and whats the role of Sales Rep in the role hierarchy ?If your reps are higher than some of roles then even keeping it private will allow access as for standard profiles Grant Access Using Hirerachy Checkbox is always checked and you cant modify

2)Is the profiles of sales rep has Modify All Data or view All Data checked ?This will allow to view irrespective of sharing rules set.

3)Check the permission sets assigned to the User .Permission sets may have granted additional access as well

One way to figure exact cause will be query AccountShare Record with AccountId as Account that Rep should not have access and User Id as the User Id of the REP.This way share records will tell you what process giving you extra access to records

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.